Static task
static1
Behavioral task
behavioral1
Sample
cd0b8a1e189e36a3f88f6711f02363c4dd034dca7502ba521f81bf585080626f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd0b8a1e189e36a3f88f6711f02363c4dd034dca7502ba521f81bf585080626f.exe
Resource
win10v2004-20221111-en
General
-
Target
cd0b8a1e189e36a3f88f6711f02363c4dd034dca7502ba521f81bf585080626f
-
Size
237KB
-
MD5
168994068e03c15ee08894a1ce4b832f
-
SHA1
56131f7aeb166f293b29f2e1131a5672be1f79c4
-
SHA256
cd0b8a1e189e36a3f88f6711f02363c4dd034dca7502ba521f81bf585080626f
-
SHA512
be03d335cfe2bd3a39c107c36066741846d0b19986ae269c6a6e0ccec11a83b2bc805b131ba7394b3fe8e06da8d41ef4fa855c95f9b10f6a4aa97f0756038e9a
-
SSDEEP
6144:iTaQDHVAWcmpMFC/dd21eSfa9NdosSHPPGGdMUvnjlaL/:inDaW7Dd0YSf2msSvPGGSUvnR
Malware Config
Signatures
Files
-
cd0b8a1e189e36a3f88f6711f02363c4dd034dca7502ba521f81bf585080626f.exe windows x86
a1d79a5edbcd09aef762474b6bfdd811
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
msimg32
AlphaBlend
setupapi
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
CreateFiberEx
TlsAlloc
GetCurrentThreadId
TlsFree
TerminateJobObject
GetLocaleInfoW
FoldStringW
EnumResourceNamesW
LoadLibraryA
FlushFileBuffers
TlsGetValue
Sleep
GetLastError
VirtualProtect
user32
LoadIconW
RealGetWindowClass
MapVirtualKeyW
GetSystemMetrics
Sections
.text Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ